From: Wouter Wijngaards Date: Thu, 21 Feb 2019 10:03:11 +0000 (+0000) Subject: - In man page and example config explain that most modules have to X-Git-Tag: release-1.9.1rc1~9 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=3599fd9c6007415a3e96db91014a97cee3e580eb;p=thirdparty%2Funbound.git - In man page and example config explain that most modules have to be listed at the start of module-config. git-svn-id: file:///svn/unbound/trunk@5121 be551aaa-1e26-0410-a405-d3ace91eadb9 --- diff --git a/doc/Changelog b/doc/Changelog index 94c6ed2d1..40210c995 100644 --- a/doc/Changelog +++ b/doc/Changelog @@ -2,6 +2,8 @@ - Fix the error for unknown module in module-config is understandable, and explains it was not compiled in and where to see the list. - In example.conf explain where to put cachedb module in module-config. + - In man page and example config explain that most modules have to + be listed at the start of module-config. 20 February 2019: Wouter - Fix pythonmod include and sockaddr_un ifdefs for compile on diff --git a/doc/example.conf.in b/doc/example.conf.in index b33aaff0f..d09e5a793 100644 --- a/doc/example.conf.in +++ b/doc/example.conf.in @@ -475,6 +475,9 @@ server: # module configuration of the server. A string with identifiers # separated by spaces. Syntax: "[dns64] [validator] iterator" + # most modules have to be listed at the beginning of the line, + # except cachedb(just before iterator), and python (at the beginning, + # or, just before the iterator). # module-config: "validator iterator" # File with trusted keys, kept uptodate using RFC5011 probes, @@ -823,6 +826,8 @@ server: # Python config section. To enable: # o use --with-pythonmodule to configure before compiling. # o list python in the module-config string (above) to enable. +# It can be at the start, it gets validated results, or just before +# the iterator and process before DNSSEC validation. # o and give a python-script to run. python: # Script file to load diff --git a/doc/unbound.conf.5.in b/doc/unbound.conf.5.in index 98650d207..3efdb9216 100644 --- a/doc/unbound.conf.5.in +++ b/doc/unbound.conf.5.in @@ -932,6 +932,10 @@ The ordering of the modules is important. You must also set trust\-anchors for validation to be useful. The default is "validator iterator". When the server is built with EDNS client subnet support the default is "subnetcache validator iterator". +Most modules that need to be listed here have to be listed at the beginning +of the line. The cachedb module has to be listed just before the iterator. +The python module can be listed in different places, it then processes the +output of the module it is just before. .TP .B trust\-anchor\-file: \fI File with trusted keys for validation. Both DS and DNSKEY entries can appear